package com.marisfrolg.controller;


//import org.springframework.security.access.prepost.PreAuthorize;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;

/**
 * @description:订单控制器
 * @package com.marisfrolg.controller
 * @who MiaoMiao "Sprout" BI
 * @date 2023-01-01 11:41:04
 */
@RestController
@RequestMapping("/order")
public class OrderController {
    @GetMapping("getOrder")
    public String getOrder() {
        return "hello order";
    }

    @PostMapping("createOrder")
//    @PreAuthorize("hasAnyAuthority('admin','aa')")
//    @PreAuthorize("hasAuthority('order-createOrder')")
    public String createOrder() {
        return "ok";
    }

}
